drifter

I got some info of the TweakXP forum, but as usual they are smart little buggers and have changed their adware to be more sneaky.



These are the steps.



1. Start the registry editor. This is done by clicking Start then Run. (The Run dialog will appear.) Type regedit and click OK. (The registry editor will open.)

2. Browse to the key:

'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run'

3. In the right pane, look for 'SystemEmergency', remember the file (*) that it points to, and delete the value, if it exists.

4. Browse to the key:

'HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run'

5. In the right pane, look for 'SystemEmergency', remember the file (**) that it points to, and delete the value, if it exists.

6. Exit the registry editor.

7. Restart your computer.

8. Start Windows Explorer and delete:

the files (*) (**) mentioned above

9. Start the registry editor. This is done by clicking Start then Run. (The Run dialog will appear.) Type regedit and click OK. (The registry editor will open.)

10. Use the search function in the registry editor to find smartsearch.ws and restore all the value SmartSearch has changed.



For the new version (the one i got saturday ) the registry entry is in 'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ MSConfig \ Startupreg\ UserSystem' . Basically delete the entire node.



Then search (hidden files and folders too) for c:\windows\iexplore.exe

(or iexplorer.exe cant remember now). You'll know cos it will be hidden and in lowercase.

rotarychainsaw

new virus out!

RX7Aggie

what is smartsearch?



is it that thing that takes over your homepage and 404 error pages?

ThirdGenRX7

if you're stupid enough to open email attachments from people you don't know then you deserve whatever happens to you

drifter

smartsearch hijacks IE browsers, setting itself as the homepage and blocks Ad-aware, Spy-bot and other anti-spyware programs from running, it also adds a bunch of **** to your favourites and stops you from going to the google website.

Sinful7

Where were you when you contracted smartsearch? Then we can avoid the source..

RX7Aggie

i think i got that, it kept changing my home page away from here, and it changed my 404 error page (which is still jacked up), and it added a page to my favorites section.



i deleted a *.dll file, but my 404 error page is still jacked up

RX7Aggie

dang, i cant find the file anywhere in my computer, i hate this

IGY

Sounds the same as Cool Web Search. I just got rid of this crap using this website.



CWS fix